| 2008-07-15 22:55:38 |
Richard Laager |
description |
Binary package hint: tiger
tiger loves to complain. Here are some suppressions that should either be addressed in their respective packages, or suppressed in tiger. I'll gladly file separate bugs as necessary if someone can provide guidance on what is required.
"Log file /var/log/btmp permission should be 660"
"Log file /var/log/messages permission should be 640"
"There are no umask entries in /etc/init.d/rcS"
"/etc/profile does not export an initial setting for PATH."
"The port for service postgres is also assigned to service postgresql."
"The port for service sane is also assigned to service sane-port."
"Root crontab does not exist"
"The directory /dev/bus resides in a device directory."
"The directory /dev/disk resides in a device directory."
"The directory /dev/evms resides in a device directory."
"The directory /dev/loop resides in a device directory."
"The directory /dev/snd resides in a device directory."
"File /dev/sndstat is a regular file in a device directory." |
Binary package hint: tiger
tiger loves to complain. Here are some suppressions that should either be addressed in their respective packages, or suppressed in tiger. I'll gladly file separate bugs as necessary if someone can provide guidance on what is required.
"Log file /var/log/btmp permission should be 660"
"Log file /var/log/messages permission should be 640"
"There are no umask entries in /etc/init.d/rcS"
"/etc/profile does not export an initial setting for PATH."
"The port for service postgres is also assigned to service postgresql."
"The port for service sane is also assigned to service sane-port."
"Root crontab does not exist"
"The directory /dev/bus resides in a device directory."
"The directory /dev/disk resides in a device directory."
"The directory /dev/evms resides in a device directory."
"The directory /dev/loop resides in a device directory."
"The directory /dev/snd resides in a device directory."
"File /dev/sndstat is a regular file in a device directory."
# Why log something when you're not going to look at the logs?
"The system is not configured to log suspicious \(martian\) packets"
# Is it really necessary to have an ftpusers file if there is no FTP daemon?
# We don't necessarily even need one if there is an FTP daemon,
# given things like UID range configuration options.
"There is no /etc/ftpusers file."
# Without creating a group and putting every daemon in it, there's nothing we can do about this...
# Limiting the permissions here would only protect syslog from things running as users.
"/dev/log has world permissions" |
|
